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Abstract 

This paper presents several independence results concerning the topos-valid and 
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constructive set theory and type theory are examined. 
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1 Introduction 

It may be argued that the well-known equivalence of theorems such as TychonofT theorem, or 
Stone-Cech compactification, with the axiom of choice, or other similarly non-constructive 
principles, is a consequence of the chosen formulation of the concept of space, rather than 
being an intrinsic feature of these results. By replacing the ordinary notion of topological 
space with that of locale (or frame, or complete Heyting algebra) one obtains fully gen- 
eral versions of these theorems that can be proved without any choice, and often with no 
application of the principle of excluded middle [2TJ [H [T3l [20] . 

The notion of locale is for this reason the concept of space generally adopted in choice- 
free intuitionistic settings, such as toposes or intuitionistic set theory (IZF) [26]. By not 
assuming as available impredicative principles as the existence of powersets, the concept of 
formal space, or set-generated locale, plays a corresponding role in even weaker systems, as 
constructive set theory (CZF) or constructive type theory (CTT) [3TJ E3 CD EH HI] • The 
main criterion of adequacy of this notion is that, considered in fully impredicative settings 
as ZF or IZE0, the category FSp of formal spaces is equivalent to the ordinary category of 
locales. 



*To appear on: Math. Log. Quart. 56, No. 4, 1 (2010) / DOI 10.1002/malq.200910014. 

this paper a system is defined 'fully impredicative' if it is at least as strong as full higher order 
arithmetic HHA (topos logic). 
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This paper deals with certain peculiar features of both the constructive and the intuition- 
istic theory of locales. In fact, we will mainly be concerned with certain independence results 
that follow from the consistency of CZF and CTT with a generalised form of Troelstra's 
principle of uniformity [34] . 

Our main results are mostly related to the following fundamental 'structural' aspect of 
the theory of locales: considered in any topos, the category of locales is complete and cocom- 
plete, i.e., all limits (in particular products) and colimits exist in this category. By contrast, 
the existence of binary products of arbitrary formal spaces already seems to require the use 
of strongly impredicative principles, that are not available in the generalised predicative 
settings under consideration. In particular to remedy this deficiency, the concept of induc- 
tively generated formal space was introduced in [TUl Q] : inductively generated formal spaces 
define a full subcategory FSpi of the category of formal spaces, in which limits and colimits 
do exist (albeit under the assumption of strong principles for the existence of inductively 
defined sets, such as the axiom REA in constructive set theory, see e.g. [2"4l H]1. 

By exhibiting a particular formal space that CTT cannot prove to be inductively gener- 
ated, FSpi has been shown to form a proper subcategory of FSp [TU] (see [T3] for a similar 
result in CZF). Nevertheless, since FSpi contains in particular all locally compact formal 
spaces, and since, considered in a fully impredicative setting, this category is still equivalent 
to the category of locales (as every formal space is inductively generated in such a setting) , 
the concept of inductively generated formal space has generally been regarded as providing 
the proper constructive analogue of the notion of locale. 

In this paper we show that the restriction to the category FSpi is, however, a very 
severe one: we prove that CTT, CZF, as several extensions of CZF, including REA and 
the impredicative unbounded separation scheme, cannot prove that a non-trivial Boolean 
formal space - i.e., a formal space whose associated frame is a non-trivial complete Boolean 
algebra -, is inductively generated. This result provides us with an example, for every given 
formal space S (inductively generated or not), of a formal space that these systems cannot 
prove to be inductively generated, namely the least dense subspace of S. Similar facts also 
hold for De Morgan (or extremally disconnected) formal spaces, and for formal spaces whose 
associated frame is the the Dedekind-MacNeille completion of a poset. 

Further independence results, concerning compactness, overtness (openness) and exis- 
tence of points, will then be shown to hold with respect to the internal language of toposes 
(HHA), IZF, and/or CTT and CZF. In particular, we show that CZF (+REA+...), CTT 
cannot prove that a non-trivial formal space is compact and De Morgan. This is in contrast 
with a well-known result of M. H. Stone, valid in any topos: in HHA, or IZF, the frame 
of ideals of a complete Boolean algebra is a compact De Morgan locale [19]. It follows in 
particular that, for no non-trivial compact regular formal space S, the Gleason cover of S 
[T31 |2"0] can be constructed in CZF, CTT. 

The paper is organized as follows: basic facts on formal spaces/locales as treated in 
constructive settings are recalled in Section [5J In Section [3] the version of the uniformity 
principle that we shall exploit is presented and its incompatibility with De Morgan law is 
exhibited. The independence results concerning Boolean and De Morgan formal spaces are 
described in Section @] the case of spaces arising via the Dedekind-MacNeille completion of 
a poset, and a problem left open in [TO] , are discussed in Section [5] 
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2 Preliminaries 



The reader is referred to [3l [27] for background on Aczel's constructive set theory (CZF) and 
constructive type theory (CTT), respectively. In the following, we shall use CZF strictly to 
indicate the basic formulation of Aczel's theory. An extension of CZF that is often consid- 
ered, particularly in connection with constructive locale theory, is the theory CZF+REA. 
The regular extension axiom REA is needed to ensure that certain inductively defined classes 
are sets [3]. Extending CZF with the full separation scheme (Sep) and the powerset axiom 
yields the fully impredicative set theory IZF. Adding the law of excluded middle to either 
theory (CZF or IZF) gives ZF. In the following, we use HHA (for intuitionistic higher-order 
Heyting arithmetic) to indicate topos logic [26j [34] . 

General information on locales may be found in p~3l [HI [20] ; for basic facts concerning 
the theory of formal spaces in constructive predicative settings such as CZF, CTT see 
[TJ [TO] [311 HI] or [2] |TT] . Here we synthetically recall the notions needed in this note. 

A formal topology, or formal space, is a pair S = (S, <) where S, the base, is a set, and 
<3, the covering relation, is a relation between elements and subsets of S satisfying: 

i. a G U implies a < U, 
ii. if a < U and U < V, then a < V, 
in. a < U and a < V imply a <\ U \,V , 

where U < V = (Vu G U)u < V, and U | V = {d G S : {Bu G U) (d < {u}) & (Bv G 
V) (d < {v})}. In CZF, the covering is formally a subclass of S x Pow(5'), where Pow(5) 
is the class of subsets of S; in addition to i — Hi, a further requirement in that context is 
that the class S(U) = {a : a < U} be a set for all [/ (see [I] for more). Two subsets U, V 
of S are the same formal open, U =s V, exactly when U <\V &, V <\ U . Observe that one 
may always assume that S has a 'top' element, i.e., an element Is such that S —s {Is}- An 
implication operation is defined on formal opens by U ^ V = {a E S : a I U < V}. The 
pseudocomplement U* of U (the largest open disjoint from U) is given by: 

U* = U -> = {a G 5 : a | J7 < 0}. 

A morphism f : Si — > S2 of formal topologies is a mapping / : Si — > Pow(5 f 2) 
satisfying, for all a, b G Si, U C ^i, 

/(^l) =S 2 ^2, 
m. /(a)i /(6)</(a 4. &), 
m. a < C7 implies /(a) < /(C/) 

where, for U a subset of Si, f(U) = U a e(7 /( a )- Two morphisms /, 5 : Si — > S2 are defined 
to be equal precisely when /(a) —s 2 g(a) for all a G Si. On any formal topology S, the 
identity morphism is given by ids(a) — {a}, for all a. 

A (formal) point of a formal space S is a subset a of S satisfying: 
i. (Ba G S)a G a 
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ii. a,b G a implies (3c G a) c G a \. b. 

Hi. a £ a and a <\U imply (36 G U) b G a. 

In particular, the top element lg (when it is present) belongs to every point, and for no 
a G a, is a <a 0. 

Even classically, a formal space may well have no points and be non-trivial, i.e., such that 
->(S < 0). In terms of logic, this is because points of a formal space are the Pow({T})-valued 
(classically two-valued) models of a geometric theory, which may be consistent without 
having a model [T3] . 

A subspace of a formal space S = (S,<\) is a formal space S' = (S, <'), on the same 
base, and with <]' satisfying i <C<', and ii. x I' y <' x \. y. See [TT] for a more detailed 
discussion. For example, a (formal) open subset V C 5 determines the closed subspace 
5 y = (5, < v ), with a <\ v U a <\UUV (intuitively, S v represents the complement of 

the open V as a subspace). 

A formal space S is set-presented iff there are families of sets I(x), for x in S, and 
C(ic, i) C S 1 , for a; G S 1 , i G /(x), such that 



Observe that this implies a < C(a,i) for all i. In CZF+REA, CTT, S is set-presented if 
and only if it is inductively generated in the sense of [I][TU]. In CZF, CTT, the class of set- 
presented formal spaces contains all locally compact spaces pQ. In a topos, or in (I)ZF, all 
formal spaces are trivially set-presented: one simply defines I(x) = {U G Pow(5) : x <\ U}, 
C(x, U) — U . The full subcategory of set-presented formal spaces has limits and colimits in 
sufficiently strong versions of constructive set theory and type theory. 

In CZF, a class-frame (or class-locale) L is a partially ordered class that has a top 
element, binary meets, and suprema for arbitrary sets of elements of L, and that is such 
that meets distribute over the set suprema. A class-frame is said to be set-generated by a 
subclass B if: i. B is a set; ii. the class {b G B : b < x} is a set and x = \/{b G B : b < x}, 
for all x G L. 

Morphisms of set-generated frames are class-functions respecting meets, the top, and arbi- 
trary set joins. 

Given a formal topology S, let the collection of saturated subsets of S, i.e., the class {U C 
S : S(U) = U}, be denoted by Sat(S). Endowed with the operations U AV = UnV = U I 
V and Vie/ ^ = ^(Uie/ ^*')> Sat(S) is a set-generated frame. The implication operation 
previously recalled defines an implication operation on Sat(S) in the usual sense, making it 
in a complete Heyting algebra. In particular, U* , for U G Sat(S) is the pseudocomplement 
of U in the ordinary lattice-theoretic sense. 

With their respective morphisms, formal topologies and set-generated class-frames form 
equivalent categories [IJ[2]- With powersets, every set-generated class- frame has a set of 
elements, so it is just an ordinary frame (locale). Therefore, in fully impredicative settings 
such as toposes, the category FT of formal topologies is equivalent to that of frames (see 
also [31]). Its opposite FSp=FT op , here referred to as the category of formal spaces (often 
simply spaces) and continuous functions, is thus equivalent in such settings to the category 
of locales. 
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3 Uniformity principles 



To distinguish the behavior of formal spaces in constructive settings from that in an intu- 
itionistic but fully impredicative context, we will exploit a generalised form of the so called 
uniformity principle 34, 30 . In constructive set theory this is so formulated: for every set 

(Vs) (By G I)A(x, y) -> {By G I) (Vx)A(x, y) (GUP-CZF) . 

In [U[S] this principle has been proved to be consistent (in particular) with CZF+REA+ 
PA+Sep, where REA is the regular extension axiom, PA is the presentation axiom, and Sep 
is impredicative unbounded separation (see [5] for a list of other principles compatible with 
GUP-CZF. Consistency of these principles with CZF is shown in [5] by the definition of a 
model that has independently been noted also in [25] and [33]; see also [29]). Note that 
GUP-CZF follows from its instance: 

(Vx)(3y G cj)A(x, y) -4 (By G w)(Vx)A(x, y) (UP-CZF) 

(ui is the set of natural numbers), and the principle that every set is subcountable, also valid 
in the model of GUP described in [5J [55] [33J . It will be convenient to note explicitly the 
following consequence of GUP-CZF: for every set /, 

(Vp G Pow({T}))(3i e I)A(p, i) -> (Bi G 7)(Vp 6 Pow({T}))A(p, i) (GUP'-CZF) 

where Pow({T}) is the powerclass of the one-element set (the antecedent of GUP'-CZF 
yields (Vx)(By G I)((Bz)((Ww)(w ez^wexkwe {T}) & A(z,y))); one can then 
apply GUP-CZF). The type-theoretic formulation of this principle, first exploited in [10], is 
recalled in the Appendix. 

We write EM, DML for the principle of excluded middle and De Morgan law, respec- 
tively. Recall that De Morgan law -i(P A Q) — >• -P V -\Q for all propositions P, Q, is 
equivalent to 

-.-.P V -.P 

for all P. By the identification of subsets of the one-element set with restricted formulas 
(those in which all quantifiers are bounded) [3J, in CZF this principle for restricted formulas 
can be formulated as 

(Vp G Pow({T}))p** Up* = {T} ([R]DML) 

where p* = {x G {T} : x $p}. Note that, considered in IZF, [R]DML expresses De Morgan 
Law for arbitrary formulas. 

The generalised uniformity principle conflicts in CZF with [R]DML, and with DML in 
CTT. We prove the first fact: assume that p** Up* = {T} for all p G Pow({T}). Define a 
relation F C Pow({T}) x {0, 1} by letting 

(x, y) EF ^ (T 6 x** & y = 1) V (T £ x* & y = 0). 

By the assumption, (T G x**) V (T G a;*) for all a; G Pow({T}), so that trivially 

(Vz G Pow({T}))(3y G {0,l»(x,v) G P. 
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By GUP-CZF, this gives 



(By G {0,l})(Vz G Pow({T}))(x,j/) G F, 

which yields a contradiction (consider x — {T},x = 0, for y = 0, y = 1, respectively). 

Of course, this implies that GUP is inconsistent with the principle of excluded middle EM 
in CTT (see also m CZF with excluded middle for restricted formulas, or equivalently, 
with 

(Vp G Pow({T}))p U p* = {T} ([R]EM) 

(again, considered in IZF, [R]EM is equivalent to the full law of excluded middle). 

In the following, we shall write CZF* or CTT* for a generic fixed extension of CZF 
or CTT, respectively, that is compatible with the generalised uniformity principle. For 
simplicity, we call any extension of this kind a 'constructive setting' (this terminology is 
quite improper, given that CZF* may be taken to be given by CZF plus the impredicative 
unbounded separation scheme Sep). With 'intuitionistic setting' we indicate any of CTT*, 
CZF*, IZF, HHA. 

We shall make free use of the fact that all the settings that we consider may consistently 
be extended with the negation of the (restricted) De Morgan law. The assertion that a 
space of a certain type cannot be proved to have a certain property in a certain setting will 
invariably be proved by showing that in the setting extended with some compatible non- 
classical principle (as GUP, or -i[R]DML), the assumption that the space has the property 
is contradictory. 

For definiteness, in what follows we always argue in the setting of constructive set theory. 
The proof for a different system for which a given result is claimed, is obtained by the 
expected modifications of the given argument. 



4 Boolean and De Morgan locales/formal spaces 

By exploiting the generalised uniformity principle it is shown in |10) that there is a formal 
space that CTT cannot prove to be set-presented; in |16] it is shown by other means that 
the system CZF cannot prove the so-called 'double-negation' formal space Pow({T})^ (see 
Section [3]) to be set-presented^. We shall see in Section [5] that Pow({T})^ and the space 
considered in [TU] are in fact isomorphic, and that their associated frame is a complete 
Boolean algebra. The same argument given in |16) can then be used to show that any 
formal space whose associated frame is a non-trivial (complete) Boolean algebra cannot be 
proved to be set-presented over the basic set of axioms of CZEj. 

In this section, using the generalised uniformity principle we give a simple proof that no 
system CZF*, CTT* can prove a non-trivial Boolean formal space to be set-presented. In 
particular, thus, this holds for CZF*=CZF+REA+PA-|-Sep. A similar result is also shown 
to hold for De Morgan (or extremally disconnected) formal spaces. 

Further independence results concerning overtness, compactness and existence of points 
are also obtained. Aside from Theorem 14.101 these make no use of the consistency of GUP 

2 As noted in | 16| . R. Grayson |17l had obtained a corresponding result for certain formulations of 
intuitionistic set theory without the powerset axiom. 

3 This observation is essentially due to S. Vickers; in fact also the corresponding of this result was known 
to Grayson |17) in connection with the set theories he considered (cf. footnote [5J . 
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with the given setting and hold true, mutatis mutandis, also with respect to topos logic 
(HHA), or IZF. All results in which the generalised uniformity principle is involved, which 
thus only concern the constructive settings, will be marked with GUP. 

Call a formal space S such that Sat(S) is a Boolean frame a Boolean formal space. From 
now on, let for simplicity S have a top basic element I5. If S is set-presented, also the 
enlargement of its base with a top element I5 can be proved to be set-presented (this is 
proved in type theory using type-theoretic choice [11] , in constructive set theory exploiting 
the Subset Collection scheme). Thus, a Boolean formal space is one such that I5 =s UUU* 
for all U G Pow(S). 

A formal space S is De Morgan if it satisfies l s < U** U U* for all U G Pow(5). 
Classically, a topological space is extremally disconnected iff its frame of open subsets is De 
Morgan [20]. Obviously, S Boolean implies S De Morgan. 

For p 6 Pow({T}), we shall suggestively write P to stand for T G p, while 'Vp' will 
always stand for 'for all p in Pow({T})'. We set 

Up = {x G S : x = l s k P} = {x G S : x = l s k T G p}. 

Note that, in any formal space, {Is}* = S* =s 0, and 0* = S =s {Is}- 

Lemma 4.1 Let S be any formal space. 

i. If(Vp)(3x)x eUpUUp k ->(x < 0), then (Vp)PV-.P, i.e., (Vp G Pow({T}))p Up* = 
{T}. 

ii. If (Vp)(3x)x e Up* U Up k -i(x < 0), then (Vp)— P V -.P, i.e., (Vp G Pow({T})) 
p** Up* = {T}. 

Proof. From x G f/p one gets P. From a; G J7p and -i(a; < 0) one obtains ->P as follows: 
assuming P, one has Up = {x G S : x = I5}, so that Up < 0; together with x G C/p and 
-1(2 < 0), this yields a contradiction, so that -P. Finally, assuming -P gives ?7p = 0, and 
thus also Up* =s 0; by x G C/p*, ->(x < 0) one derives -1-1P. The reader may then easily fill 
in the details. □ 

In |14j one finds an 'arrow-theoretic' proof that no Boolean frame may have points, unless 
classical logic is accepted. Here is another formulation of that proof, and the corresponding 
fact for De Morgan locales. 

Proposition 4.2 No Boolean formal space can have a point unless [R]EM is accepted in 
CZF* (EM in CTT* , HHA, IZF). No De Morgan formal space can have a point unless 
[RJDML is accepted in CZF* (DML in CTT, HHA, IZF). 

Proof. Assume Boolean formal space S has a point. 

S Boolean implies (Vp)lg < Up U Up; 

S has a point a implies that (Vp)(3a)a G Up U Up k a G a. 
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By a £ a one has -i(a < 0), and then one concludes using Lemma |4~T1 The proof for the De 
Morgan case is similar. □ 

As the settings in consideration (CZF*, CTT*, HHA, IZF) can be extended consistently 
by -i[R]DML (->DML), in these settings De Morgan locales/formal spaces cannot be proved 
to have points. This implies that no such formal space is a topological space, i.e., no non- 
trivial De Morgan (in particular Boolean) frame can be obtained as the frame of opens of a 
non-empty (inhabited) topological space. Classically, of course, the lattice of open subsets 
of any discrete (non-empty) space is a Boolean frame with points. 

Despite this result, at least in HHA/IZF, there are Boolean locales that are proper, i.e., 
such that, for all U € Pow(5), S < U implies 3a £ U (see [2]). Properness is a stronger 
formulation of non-triviality. 

A formal space (S, <i) is open (or overt, or has a positivity predicate [22j EU [10] ) iff there 
is a predicate Pos(x), for x in S, satisfying 

i. Pos(a) and a <j [/ imply (3b £ S)b £ U & Pos(6) (monotonicity); 

ii. a <J U implies a <J U + = {b £ U : Pos(o)} (positivity) . 

(Note that classically, all formal spaces are open, with Pos(a) = -i(a < 0)). Then, although 
a Boolean locale can be proper, it cannot be open. 

Proposition 4.3 No non-trivial De Morgan formal space S (in particular, no non-trivial 
Boolean formal space ) can be proved to be open in the intuitionistic settings considered. 

Proof. Assume S is open. Then, by positivity, Is < {ls} + - Assume I5 £ {ls} + , so that 
Pos(ls) holds. Then, 

S De Morgan implies (Vp)l s < Up* U Up; 

by Pos(ls) and monotonicity of Pos, for all p there is a £ Up* U Up with Pos(a). 

Thus, since Pos(a) implies ->(a < 0) (by monotonicity), by Lemma 14.11 one obtains 
(Vp)-i-iP V -1 P. As the settings under consideration can be extended with the negation 
of (restricted) De Morgan law, one has that I5 £ {ls} + leads to a contradiction in the 
extended setting, so that {ls} + = 0. But this cannot be, as, by positivity Is < {ls} + , and 
we assumed the space to be non-trivial. □ 

This proof shows that Boolean formal spaces can be proper only because the elements 
one extracts from each cover of the whole space are not required to be different from the 
empty open, let alone positive. 

Theorem 4.4 (GUP) Let S be 

i. a non-trivial Boolean formal space, or 

ii. a non-trivial De Morgan formal space such that (Vx £ S)x <3 V ->(x < 0); 
then S cannot be proved to be set-presented (inductively generated) in CZF* or in CTT* . 
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Proof, i. Assume S has a set-presentation in CZF*. Then 
S Boolean implies: (Vp)ls < Up U Up; 

S set-presented implies: (Vp)(3i G 7(l s ))C(ls, i) C C/ P U t/|>; 

assuming GUP, this implies: (Bi G I(l s ))(\fp)C{l s , i) C[/ P U Up. 

In particular, taking p — {T} so that P = T G {T} is true, this gives 

(*) Vx G C(l 5> t)(a: = l s Vi < 0). 

Then assume x = Is G C(lg,i). Since C(l,g,i) C Up U JTp, and since S is non-trivial, by 
Lemma one gets (in CZF*+GUP) (Vp)P V -P. We saw that GUP is incompatible with 
[R]EM. Therefore, by (*), one gets Vx G C(ls,i)x < 0; but Is < C(ls,i), and we assumed 
S to be non-trivial, whence S is not set-presented in CZF*+GUP. This shows that S cannot 
be proved to be set-presented in CZF* . 

ii. Assume S is set-presented in CZF*. Note first that if S satisfies (Vx G S)x < 0V-i(x < 
0), but has no top element lg, also the isomorphic formal space with a top will sat- 
isfy the given decidability condition, as, for the top element, we have by hypothesis that 
-.(Is < 0). Then, in CZF*+GUP, one finds i G I(l s ) such that (Vp)C(l s ,i) C Up* U Up. 
Let x G C(ls,i), and assume ->(x < 0). By Lemma [4TT1 one obtains (Vp)->-iP V ->P. As this 
contradicts GUP, one has -1-1(2: < 0). By the decidability of x < 0, it follows that x < for 
all x G C(ls,i). But 5 is non-trivial, so that it (is not set-presented in CZF*+GUP and 
thus) cannot be proved to be set-presented in CZF*. □ 

An example of a De Morgan non-Boolean formal space satisfying the condition in Theorem 
14.41 is presented in the next section. 

This theorem shows that the formal spaces that cannot be inductively generated consist 
not just of few pathological cases. In particular, one has: 

Corollary 4.5 Given any non-trivial formal space S, the formal space S** = (S, <**), 
where a <J** U <^=> {a}** < [/**, can not be proved set-presented in CTT* , CZF* . 

The space S** is indeed the Boolean formal subspace corresponding to the **— nucleus on 
the frame defined by S, i.e., the space associated with the frame of 'regular' elements of 
Sat(S) (see e.g. [Ml [20] for a discussion of the **— nucleus on a locale £)□ S** is non-trivial 
as soon as S is non-trivial. 

These subspaces/nuclei are, also classically, a peculiarity of locale theory (as opposed to 
point-set topology), since, given any locale L, the **— nucleus on L yields the least dense 
sublocale of L. (This need not exist in a topological space; consider e.g. the real line: the 
rationals and the irrationals define dense disjoint subspaces). 

Remark 4.6 Although not set-presentable, Boolean formal spaces are constructively useful: 
an example of the use of a Boolean formal space to obtain a concrete (constructive and 
predicative) description of ideal non-effective objects can be found in [7J Theorem 6.1]. 

4 In the literature on locales this nucleus is also known as the Booleanization of S. There are many 
Boolean sublocales of a given locale L, but each of them can be seen as defined by a **— nucleus over a 
closed sublocale of L 1 14| . 
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The following proposition shows that being Boolean also conflicts with being compact. 

Proposition 4.7 No non-trivial Boolean formal space S can be compact unless [R]EM in 
CZF*, EM in CTT, ERA, IZF, is accepted. 

Proof. Assume S is compact. 

S Boolean implies (Vp)ls < Up U Up; 

S compact implies that, for all p, there is a finite uq such that Is <i uq Q Up U Up. 

It is a standard fact that Uq C l^Ulf, with u finite, implies intuitionistically u — vqUwq, 
with Vq C V, Wo C W both finite [5J. Thus we have finite Vq C Up,Wq C f7|>, with 
lg < vq U Wo; moreover, 'finite' implies 'either empty or inhabited'. By cases: v , wq = 
cannot be, by non-triviality. Then one of the following alternatives holds: 

1. vq,wq inhabited, or 

2. vq inhabited and wq = 0, or 

3. vq = and wq inhabited. 

The first and second case directly give P V -P. For the last, assuming P one gets Wq < 0, 
that together with vo = 0, gives lg < 0, so that, by non-triviality of S, -P, and then again 
P V -P. Therefore, if S is compact, the law (Vp)P V -iP holds. □ 

In CZF*, or CTT*, more generally, no non-trivial Boolean space S can be proved to be 
locally compact, since locally compact formal spaces are set-presented pQ, and by Theorem 
!4.4l no non-trivial Boolean space S can be proved to be set-presented in these settings ('more 
generally': any Boolean S is regular, and a compact regular locale is locally compact, e.g. 
[20]). Classically (e.g. in ZF), every finite discrete space has a compact Boolean frame of 
opens. 

So far the generalised uniformity principle has only been used to show that a constructive 
system cannot prove that formal spaces of a certain type can be set-presented. We conclude 
this section with two other important consequences of the consistency of this principle with 
the constructive settings we are considering. 

First let us note that, contrary to what one may expect, in HHA or IZF, De Morgan 
locales can be compact: the classical result (due to M. Stone) that the (compact) frame 
Idl(B) of ideals over a Boolean algebra B is De Morgan if and only if B is complete (e.g. 
[19] ) is topos- valid. The following is one half of this result, formulated for formal spaces. 
Recall that in e.g. IZF, frames and set-generated class-frames come to the same thing, so 
that Sat(S) is carried by a set for every space S. 

Proposition 4.8 (Stone) In any of the intuitionistic settings we are considering, let S be 
a Boolean formal space. In the context of CZF* , or CTT" , assume further that Sat(S) is 
(carried by) a set. Then the formal space Sp = (Sat(S), <p), with U <d^ {Ui}i e i U < 

Ui t U ... U Ui n for {ix, ...,««} a (possibly empty) finite subset of I, is a compact De Morgan 
formal space. 
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Proof. The proof that Sp is a formal space is left to the reader. One has to prove 

s < p ({Ui} ieI )^ u {{u t } ieI y^ 

for any given set {Ui}i^i of elements of Sat(S). Routine calculations show that 

({t/*wr=/3{(U^r s } a) 

iei 

(* s is pseudo-complementation in S), so that 

(({^W)^)* 9 =/3{(|J^)* S * S }- (2) 
iei 

Since S is Boolean, (U ieJ Ui)* s * s = s \J ieI fy. As 

S < ((J Ui)* s U (|J Ui) =s (IJ ^)* s U (|J t/,)* s * s , 
iei iei iei ie/ 

one has S <p {QJ ieI Ui)* s , (Uiei Ui)* s * s } by definition of <}p (note that pseudo-complements 
are saturated). Therefore, by 1,2 above, S <p ({CAlis/)* 13 U({£/ l } ie/ )*< 9 *< 3 , as wished. □ 

Despite this fact, one has: 

Proposition 4.9 No non-trivial De Morgan formal space S such that (Vx € S) — i — i(as < 
0) V -i(x < 0) is compact unless [R]DML holds in CZF* (DML holds in CTT* , HHA, IZF). 

Proof. For all p E Pow({T}), one finds a finite vq with vo C Up* U Up, Is < «o< O ne has, 
in particular, (Vx G vo) _l ^(x < 0) V ->(x < 0). By a general intuitionistic principle (see [2"2l 
Lemma 2.4]), this gives (Vx G uo)( _l ^(x < 0)) V (3.x G Vo)(-i(x < 0)). Since vq is finite, we 
get -i— i(Vac G w )(x < 0) V (3x G uo)^^ < 0)). It cannot be that x < for all x G w - Thus, 
there is x G t>o with ->(x < 0), so that one concludes by Lemma [4~T1 □ 

As a consequence, in a topos that does not satisfy De Morgan law, no frame of the 
form Idl(B), with B complete Boolean algebra, can have a base satisfying the decidability 
condition in the above proposition. Note also that such frames are examples of De Morgan 
frames that are never intuitionistically Boolean, given that no Boolean frame can be proved 
compact. 

Using the generalised uniformity principle, the above proposition may be strengthened. 

Theorem 4.10 (GUP) No non-trivial De Morgan formal space S can be proved to be 
compact in CZF* , CTT*. 

Proof. Using GUP, one has that a finite subset uq = {xi,...,x„} of S exists such that 
(Vp)ls < u C Up U Up* (u is non-empty, as S is non-trivial). Assume ~^{x\ < 0) V 
... V -i(x„ < 0). By Lemma [4.11 one has that (Vp)-i-iP V holds. We saw that this 
principle is incompatible with GUP, so that — 1(— i(aci < 0) V ... V ->(x„ < 0)). This gives 
— i— i(a:i < 0) &...& ~>- i (x n < 0), that is — •— i(aii < x„ < 0). On the other hand, from 
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Is < m one gets -i(xi < &...& x n < 0), so that 5 (is not compact in CZF*+GUP, and 
hence) cannot be proved to be compact in CZF*. □ 

Recall that the Gleason cover of a compact regular formal space S is a minimal surjection 
jS S, with 7S a compact, regular, De Morgan formal space [TH^U]. It then follows from 
Theorem 14.101 that, in contrast with what happens in a topos, for no non-trivial compact 
regular formal space S the Gleason cover of S can be constructed in CZF*, CTT* . 

By Theorem 14.101 it also follows that no non-trivial frame can be assumed to be carried 
by a set in a constructive setting (see [T2] for a more direct proof). 

Corollary 4.11 (GUP) Every non-trivial frame Sat(S), for S Boolean, is carried by a 
proper class in CZF*, CTT*. Thus, no non-trivial frame Sat(S) may be proved to have a 
set of elements in these contexts. 

Proof. If the collection of elements of Sat(S) could be proved to be constructively a set, 
by Proposition 14.81 the formal space Sp would be compact and De Morgan, contradicting 
Theorem 14.101 Now assume a frame Sat(S) has a set of elements; then all frames Sat(S'), 
for S' a subspace of S, are carried by a set, too, so that also Sat(S**) should be. □ 

Remark 4.12 The property of Boolean formal spaces that has been exploited in the proofs 
of Propositions 14.21 14.71 and Theorem 14.41 is that the whole space S is covered by Up U Up, 
for all p in Pow({T}) (this is also true for Proposition 14.31 if one proves the result just for 
the Boolean case). It is easy to check that a morphism / : S — > S', with S Boolean, 
preserves pseudocomplements. It follows that whenever such a morphism exists, one also 
has (Vp)ls' < V P U V£, with V P = {x G S' : x = l s > & P}. Then, Propositions |OJ 
14.71 and Theorem l4.4l hold true more generally if one replaces the Boolean space S with any 
non-trivial codomain of a morphism with Boolean domain. Similar considerations also hold 
in connection with the results concerning De Morgan spaces in Propositions l4.2[ 14.31 14.DI and 
Theorems 14.41 14.101 when / : S — > S' is any morphism that preserves pseudocomplements 
(in particular, when / defines an open continuous functions of locales/formal spaces |22)V 

In contrast with the Boolean case, one cannot hope to prove that every subspace of a 
De Morgan formal space is De Morgan: classically, an extremally disconnected space may 
have Hausdorff subspaces that are not extremally disconnected. In [T8], the following law is 
considered: for all propositions P, Q 

(P^Q)V(Q^ P). 

This principle is stronger than De Morgan's (take Q to be -P), and is inherited by the 
internal logic of sheaf subtoposes [TB]. Call strongly De Morgan a formal space such that 
the associated frame models this formula. A strongly De Morgan formal space is De Morgan. 
It is easy to prove that the class of strongly De Morgan formal spaces is closed for subspaces. 

5 Dedekind MacNeille completions 

Given a set S, and any (class-)relation R(a, U), for a G S and U G Pow(S), one may define 
R to be set-presented precisely as for coverings. Let <P(P) be an instance of a law in one 
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variable P that is incompatible with GUP, e.g. <£(P) =PV->P (in CZF*, pUp* = {T}, for 
p G Pow({T})). 

Proposition 5.1 (GUP) Let S be a set, and let R C 5 x Pow(S') 6e smc/i i/iai, /or some 
a in 5, -iR(a, 0), and (\/p)R(a,U$tp\), where f/$(p) = {a;G5:x = a& ^(P)}. TTien i? 
cannot be proved to be set-presented in CZF* , CTT*. 

Proof. Assume R is set-presented by C(x,i) with x G S and i G /(#)• By GUP, there 
is i G /(a) such that (Vp)C(a, i) C C/<p(p) and R(a,C(a,i)). Assume X G C(a,i). Then 
(Vp)^(P). By hypothesis this contradicts GUP. Therefore, C(a,i) = 0, and P(a, 0), against 
what we have assumed. □ 

Recall that the Dedekind-MacNeille completion of a partial order makes it possible to 
embed a given partially ordered set in a complete lattice preserving meets and joins that 
exist (see e.g. [32| [34]). Given a partially ordered set (S,<), one may define a relation 
P c (x, U) by letting 

iZcfo CO (Vy)[(Vu G t/)u < y] -> a; < y s G f| | y. 

UCiy 

To have that R c is a covering relation, the Dedekind-MacNeille covering, the partial order 
has to satisfy some further conditions. In particular, if S is a Heyting algebra this is always 
the case. The frame Sat(S, R c ) of saturated subsets of the formal topology (S, R c ) is then 
the complete lattice in which the Heyting algebra S is embedded via e : S — > Sat(S, R c ), 
e(a) = <S({a}). Recall that, as over any frame, an implication operation making Sat(S, R c ) 
a complete Heyting algebra can be defined by letting U^tV = {a<ES: a^U < V}. The 
Heyting algebra structure of Sat(S,R c ) then extends that of S (see e.g. [33], vol. II). 

T. Coquand has suggested^ that no Dedekind-MacNeille covering can be constructively 
proved to be set-presented (see also [9]). We prove here that this holds for every relation 
R c (x, U) on a given poset (S, <), but with a further hypothesis. 

Proposition 5.2 (GUP) Let (S,<) be a partial order having at least one element a that 
is not the least of S, and that is 'stable', in the sense that — >— i(o < x) implies a < x, for all 
x. Then the relation R c (x,U) cannot be proved to be set-presented in CZF*, CTT*. 

Proof. By Proposition 15.11 it suffices to show that -^R c (a, 0) and (Vp)R c (a,U$(p)), with 
U HP) = {a : <Z>(P)}, and <2>(P) =PVnP. If P c (a,0), then a G f]^ iy | y. This gives 
(Vy G S)a < y, against the hypothesis. For the second, let J7<j,(p) CJ, y, and assume 
"■(o < y) an d ^(P)- Then C/#(p) = {a} CJ, y, so that a < y, against what we have assumed. 
This gives -i{?(P). As -i-i#(P) is intuitionistically provable, we get — i— i(a < y), whence 
a < y. We conclude that a G Dc^/p c+y 4- 2/i f° r au Pj i- e -' (Vp)-Rc(a, C/$(p)). □ 

Note that this proof is, in essence, a simplification and a generalization of the proof for 
the special case considered in [TO] . 

5 On the occasion of the presentation of the material in the preceding sections at the workshop "Trends 
in constructive mathematics", Chiemsee (Germany) June 19-23, 2006. 
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Corollary 5.3 (GUP) If (5, <) is any poset with at least two elements and a decidable 
order relation, then R c (x,U) cannot be proved to be set-presented in CZF*, CTT* . 

These results may be used to produce examples of non-De Morgan formal spaces that 
cannot be constructively set-presented. 

Corollary 5.4 (GUP) Let H = (S, A, V, — >, 0, 1) be a Heyting algebra satisfying the hy- 
pothesis in Provosition 1 5. i?l (w.r.t. the partial order associated with H). Assume in H De 
Morgan law is false, i.e., there is b G S such that 1 ^ b* V b** . Then the relation R c (x, U), 
defining the Dedekind-MacNeille cover on H , defines a non-De Morgan formal space that 
cannot be proved to be set-presented in CZF*, CTT* . 

Proof. As already recalled, the (set-generated) frame Sat(S, R c ) associated with the 
Dedekind-MacNeille cover defined over an Heyting algebra H is a complete Heyting al- 
gebra in which the Heyting algebra operations extend the corresponding operations on H. 
As b* = b — > one can conclude. □ 

The set T = {0, |, 1} endowed with the natural order is a non-Boolean Heyting alge- 
bra. The Dedekind-MacNeille cover over this poset defines a De Morgan non-Boolean formal 
space (T, <\dm)- That T is non-Boolean again follows by the fact that the complete Heyting 
algebra Sat(T) is such that the Heyting algebra operations are extensions of the correspond- 
ing operations of T. To prove that (T, <Jdm) is De Morgan, i.e., that for every U G Pow(T), 
1 G f)K(U), with K(U) = {I y : U* U U** C| y}, first one notes that U* U U** C| 1; 
unwinding the definitions, one then proves that assuming 1 G" U* U U** leads to a contra- 
diction, so that -.1 U* U U** (sketch: 1 £ U* U U** implies -(1 G U*) & -(1 G U**). 
The second conjunct yields ^ U* & 1 U*), that in turn gives (| ^ U & 1 ^ {/); 
on the other, by the first conjunct one gets ->(| g" {/ & 1 ^ [/), so that a contradiction is 
reached). Therefore, K{U) and I g #(Z7), whence 1 G fl-^^)- % Proposition EJ 

(or Theorem 14.41) one has that (T, <_dm) is not constructively set-presentable. 

Remark 5.5 If in the hypotheses of Proposition 15. 11 R is a covering < on a set S, and if 
a = Is =5 S, then for every morphism / : S — > 5', by l s < U<p^p) one gets ls> < C^(p)' 
with UL p s = {x G S' : x = l s , k $(P)}- Therefore, if S' is non-trivial, by Proposition [5711 
it is not set-presentable. As an immediate corollary one has in particular that no formal 
space defined by the Dedekind-MacNeille cover on a poset (S, <) with the properties in 
Proposition 15.21 and such that a is also the greatest element of (S, <), may have points 
(as points are in a bijective correspondence with morphisms from the given topology to the 
set-presentable topology Pow({T})), and that every non-trivial formal subspace of S is not 
set-presentable (if S' = (S, <') is a subspace of S, letting e(x) — {x} for all x G S defines a 
morphism e : S — > S'). 

In fact, the next result can be obtained without any reference to the uniformity principle 
(see also [5])- 

Proposition 5.6 Let S be a Dedekind-MacNeille topology defined on a poset with the prop- 
erty in Proposition \5.2l and having a as greatest element. If S has a point, or is compact, 
then [R]EM in CZF* (EM in CTT*, HHA, IZF) holds. Furthermore, S cannot be proved to 
be open in the intuitionistic settings considered. 
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Proof. Follows immediately by the fact that it holds -ii? c (a, 0) and R c (a, /7<j(p)) for all p, 
with <P(P) = (pUp* = {T}j (cf. proof of Proposition IQj) . □ 

We conclude this section with a discussion of Open Problem 4.5 of [ID]. Taking S — {0, 1} 
with the natural order, and a <dm U = R c {a, U) we obtain the formal space that is in [TU] 
shown not to be set- presentable in CTT. Let us denote this space by Sdm- 

We already pointed out that a uniform method for the definition of products of arbitrary 
formal spaces is generally regarded as being beyond constructive means. Open Problem 4.5 
of [TU] asked whether at least the particular product of Sdm with itself is predicatively 
definable. The answer in this (indeed very special) case is yes. We show this with a slight 
detour. The 'double negation' formal topology Pow({T})-,-,, is defined by 

S = {T}, T < U <=^> (T S U). 

In [T5l [16] it is shown that the system CZF cannot prove Pow({T})-,-, to be set-presentable. 
Note that Pow({T})-,-, is isomorphic with the Boolean formal space Pow({T})** of regular 
elements of Pow({T}) (cf. section HJ. 

It is then easy to see that Pow({T})-,-, and Sdm are the 'same' formal space. 

Lemma 5.7 Sdm — Pow({T})^-,. 

Proof. It is an exercise in intuitionistic logic to prove that =s nM 0, _,_, (1 £ U) •<=>■ 
1 <dm U, and — i— i(T e U) implies 1 <dm {1 : T 6 (/}. It follows that the homomorphisms 
/ : Sdm — ► Pow({T}).^ and g : Pow({T})^. — > Sdm, given by /(0) = 0, /(l) = {T}, 
and g(T) = {1}, yield the required isomorphism. □ 

Now the product Pow({T})^ x Pow({T})^ in FSp is simply Pow({T})^ itself: 
Pow({T})-,-, is 'almost' a terminal object in FSp, if a morphism with Pow({T})^ as domain 
exists, then it is unique. 

Conclusion 

The generalised uniformity principle has been systematically exploited in this paper to ob- 
tain non-derivability results for the main formal systems for constructive mathematics, in 
particular with the aim of distinguishing topos- valid from intuitionistic generalised predica- 
tive mathematics. It has already been pointed out that it is improper to define 'constructive' 
an extension of CZF or CTT that is consistent with the generalised uniformity principle, as 
e.g. CZF plus the highly impredicative unbounded separation principle is one such extension. 
On the other hand, it may be reasonable to define 'non-constructive' a result that cannot 
be derived within some extension of CZF or CTT that is compatible with GUP. This note 
has thus shown that some standard topos-valid results are in fact non-constructive in this 
sense. A further important result, valid in any topos, that turns out to be a non-constructive 
theorem in the present sense is described in |12j . 
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Appendix: The generalised uniformity principle in type theory 

In the type-theoretic context the generalised uniformity principle reads informally as follows: 
given any set /, and any mapping R into the type of propositions PROP taking a proposition 
and an element of / as arguments, if a mapping F is given from PROP to I such that 
R{P,F{P)) holds for all P, then one may find an element i 6 / such that R{P,i) holds 
for all P. We denote this version of the principle by GUP-CTT. Observe that, due to 
the propositions-as-sets identification, the type PROP of propositions may be replaced in 
GUP-CTT by the type SET of sets. In [10] this principle is formulated implicitly and it 
is claimed that GUP-CTT can be 'added' consistently to type theory. Models, due to T. 
Coquand, of type theory validating this form of the uniformity principle have then been 
discussed in [28] . 

Formally, GUP-CTT can be expressed in type theory (more specifically, in the logical 
framework [27] [8]) by the addition of two constants UP1, UP2 as follows (cf. [28]): 

UP1 : (I : SET) R : {PROP El{I) -)■ PROP) -)■ F : {PROP El{I)) -> 
G:{P: PROP -)• El{R{P,F{P)))) -» El(I); 

UP2 : {I : SET) ->• R : {PROP -> El {I) -> PROP) -> F : {PROP -> £?Z(I)) -> 
G : {P : PPOP) ->• El{R{P, F{P))) -> ((P : PPOP) -> El(R(P, U P1{IRFG)))). 
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